Description
A vulnerability was found in code-projects Online Application System for Admission 1.0. Impacted is an unknown function of the file /enrollment/database/oas.sql. Performing a manipulation results in insecure storage of sensitive information. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| code-projects | Online Application System for Admission | 1.0 | — |
References
- VDB-355438 | code-projects Online Application System for Admission oas.sql sensitive information vdb-entry
- VDB-355438 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #786307 | code-projects Online Application System For Admission In PHP 1.0 Information Disclosure third-party-advisory
- https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Online%20Application%20System%20for%20Admission%20PHP%20Exposed%20Database%20Backup.md exploit
- https://code-projects.org/ product